Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cisco wireless control system software vulnerabilities and exploits

(subscribe to this query)
383
VMScore
CVE-2010-2986
Cross-site scripting (XSS) vulnerability in webacs/QuickSearchAction.do in the search feature in the web interface in Cisco Wireless Control System (WCS) prior to 6.0(194.0) and 7.x prior to 7.0.164 allows remote malicious users to inject arbitrary web script or HTML via the sear...
Cisco Wireless Control System Software 5.2.148.0Cisco Wireless Control System Software 5.2.130.0Cisco Wireless Control System Software 5.2.110.0Cisco Wireless Control System Software 4.2.110.0Cisco Wireless Control System Software 4.2.97.0Cisco Wireless Control System SoftwareCisco Wireless Control System Software 5.2.157.0Cisco Wireless Control System Software 4.1.171.0Cisco Wireless Control System Software 4.0.155.5Cisco Wireless Control System Software 7.0.98.0Cisco Wireless Control System Software 6.0Cisco Wireless Control System Software 5.1.64.0Cisco Wireless Control System Software 5.0.56.2Cisco Wireless Control System Software 4.2.62.0Cisco Wireless Control System Software 4.1.91.0Cisco Wireless Control System Software 4.2.209.0Cisco Wireless Control System Software 4.2.173.0Cisco Wireless Control System Software 4.2.176.0Cisco Wireless Control System Software 4.1.192.35mCisco Wireless Control System Software 5.2.125.0Cisco Wireless Control System Software 5.1.65.4Cisco Wireless Control System Software 4.2.81.0
356
VMScore
CVE-2011-4014
The TAC Case Attachment tool in Cisco Wireless Control System (WCS) 7.0 allows remote authenticated users to read arbitrary files under webnms/Temp/ via unspecified vectors, aka Bug ID CSCtq86807.
Cisco Wireless Control System Software 7.0.172.0Cisco Wireless Control System Software 7.0.220.0Cisco Wireless Control System Software 7.0.230.0Cisco Wireless Control System Software 7.0.164.0Cisco Wireless Control System Software 7.0.164.3
801
VMScore
CVE-2010-2826
SQL injection vulnerability in Cisco Wireless Control System (WCS) 6.0.x prior to 6.0.196.0 allows remote authenticated users to execute arbitrary SQL commands via vectors related to the ORDER BY clause of the Client List screens, aka Bug ID CSCtf37019.
Cisco Wireless Control System Software 6.0.182.0Cisco Wireless Control System Software 6.0.181.0Cisco Wireless Control System Software 6.0.170.0Cisco Wireless Control System Software 6.0.132.0Cisco Wireless Control System SoftwareCisco Wireless Control System Software 6.0
383
VMScore
CVE-2012-5990
Multiple cross-site scripting (XSS) vulnerabilities in Health Monitor Login pages in Cisco Prime Network Control System (NCS) and Wireless Control System (WCS) allow remote malicious users to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCud18375.
Cisco Wireless Control SystemCisco Prime Network Control System -
801
VMScore
CVE-2017-12226
A vulnerability in the web-based Wireless Controller GUI of Cisco IOS XE Software for Cisco 5760 Wireless LAN Controllers, Cisco Catalyst 4500E Supervisor Engine 8-E (Wireless) Switches, and Cisco New Generation Wireless Controllers (NGWC) 3850 could allow an authenticated, remot...
Cisco Ios Xe 3.7.1eCisco Ios Xe 3.7.2eCisco Ios Xe 3.7.4eCisco Ios Xe 3.7.3eCisco Ios Xe 3.7.5eCisco Ios Xe 3.7.0e
739
VMScore
CVE-2017-3854
A vulnerability in the mesh code of Cisco Wireless LAN Controller (WLC) software could allow an unauthenticated, remote malicious user to impersonate a WLC in a meshed topology. The vulnerability is due to insufficient authentication of the parent access point in a mesh configura...
Cisco Wireless Lan Controller Software 16.088.0Cisco Wireless Lan Controller Software 7.0250.0Cisco Wireless Lan Controller Software 6.0199.4Cisco Wireless Lan Controller Software 7.0220.0Cisco Wireless Lan Controller Firmware 8.0.72.140Cisco Wireless Lan Controller Software 7.41.54
668
VMScore
CVE-2006-3285
The internal database in Cisco Wireless Control System (WCS) for Linux and Windows prior to 3.2(51) uses an undocumented, hard-coded username and password, which allows remote authenticated users to read, and possibly modify, sensitive configuration data (aka bugs CSCsd15955).
Cisco Wireless Control System
668
VMScore
CVE-2006-3287
Cisco Wireless Control System (WCS) for Linux and Windows 4.0(1) and previous versions uses a default administrator username "root" and password "public," which allows remote malicious users to gain access (aka bug CSCse21391).
Cisco Wireless Control System
445
VMScore
CVE-2006-3288
Unspecified vulnerability in the TFTP server in Cisco Wireless Control System (WCS) for Linux and Windows prior to 3.2(51), when configured to use a directory path name that contains a space character, allows remote authenticated users to read and overwrite arbitrary files via un...
Cisco Wireless Control System
231
VMScore
CVE-2006-3289
Cross-site scripting (XSS) vulnerability in the login page of the HTTP interface for the Cisco Wireless Control System (WCS) for Linux and Windows prior to 3.2(51) allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors involving a "malic...
Cisco Wireless Control System
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-21111CVE-2024-32884IDORCVE-2023-1000CVE-2024-33260CVE-2024-3682reflected XSSrace conditionCVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook